Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8d139fd8-cb64-3b4d-909a-33565c30eccc.roa
File:                     8d139fd8-cb64-3b4d-909a-33565c30eccc.roa (raw, json)
Hash identifier:          Rhs10YgV1NiNfCNoPSLtVS1Ih8QOaE72Q7lkaPQzcz8=
Subject key identifier:   8F:1E:66:2F:56:7D:B3:C3:54:58:14:CE:ED:A6:A0:91:77:6A:3A:39
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821D2C837ABC8008A907EC80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8d139fd8-cb64-3b4d-909a-33565c30eccc.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        24.107.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:2c:83:7a:bc:80:08:a9:07:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=62746327-ab7e-44a7-9fee-9792f8ee90f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:43:8c:f6:d3:2e:2d:78:2e:59:31:e4:4c:5f:
                    f2:0d:43:1b:c1:68:23:3b:ba:40:75:c9:bb:37:23:
                    a1:28:65:3b:7b:19:f0:cf:04:f6:29:ae:06:f4:1d:
                    ac:ce:43:a4:19:eb:1b:89:6e:93:0d:53:9f:47:8a:
                    77:ef:f6:a4:a2:39:91:25:91:02:dc:07:cc:c7:a2:
                    da:36:23:39:71:13:db:ea:90:21:ad:f4:d2:10:19:
                    d8:89:20:d4:07:26:71:51:6a:59:32:93:75:74:ae:
                    e7:f2:55:5b:23:97:1f:89:11:da:cc:a3:05:a2:1b:
                    c9:f8:bc:e0:71:31:d8:a2:e8:8f:76:45:bd:99:2f:
                    27:be:c7:68:10:5c:ca:e2:a1:c7:3f:1a:d2:3b:da:
                    96:79:90:19:8e:ef:d6:6c:f2:fd:22:f7:4e:b7:66:
                    3d:fe:81:2c:f2:74:2f:06:13:6a:28:b2:ae:28:8b:
                    02:ea:32:55:52:70:10:f5:c9:a8:ee:60:e0:5e:4f:
                    ba:13:70:d4:9c:fa:ca:88:df:65:13:8a:7c:35:3e:
                    96:17:ce:17:e9:c4:76:d8:c5:d4:8d:16:8d:2d:89:
                    41:23:99:e8:f5:ad:32:86:f3:eb:e5:e9:80:cd:30:
                    a4:4b:71:83:dd:73:4e:9d:c2:52:ab:f3:19:b2:fb:
                    80:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:1E:66:2F:56:7D:B3:C3:54:58:14:CE:ED:A6:A0:91:77:6A:3A:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8d139fd8-cb64-3b4d-909a-33565c30eccc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.107.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:59:ff:4b:17:17:e9:0f:38:f0:8f:d7:d8:a5:1e:8b:cb:6c:
         6e:ae:aa:b1:f7:6b:63:75:4b:b8:9a:7f:c9:64:0a:9b:2b:67:
         8f:f0:17:04:20:d8:0f:95:50:7e:7e:b8:09:0a:0e:4f:07:fd:
         c6:24:ca:6c:6f:49:e3:39:8a:55:8c:a9:65:bc:7a:9f:8a:e2:
         82:2a:42:7c:45:c3:1f:64:84:b7:af:c3:34:df:4c:f4:7e:e7:
         93:7e:e0:76:1f:da:67:65:f6:ff:a5:ed:b6:c4:a2:ba:9b:9e:
         94:86:2a:b6:37:76:ed:a5:72:3e:11:7e:33:d3:80:ca:e8:32:
         ee:96:eb:61:a9:65:5c:06:e1:ab:0b:87:99:1b:2b:73:9e:5e:
         e3:9a:63:ff:2e:9a:6e:d5:8b:b2:70:5c:cb:c5:54:b8:f1:52:
         e8:cc:94:e2:96:98:4c:cc:1e:5b:70:96:81:20:d1:c0:e6:55:
         20:1f:d7:2f:df:8f:45:3a:8c:e5:87:c0:f2:48:eb:c9:92:d1:
         81:14:3d:1c:7c:0e:86:c7:f6:cc:dd:3e:d0:47:25:cd:a8:7c:
         0e:16:3a:17:4c:0d:c9:2a:64:a2:56:21:0d:de:73:9e:1d:09:
         1a:4e:89:c8:9e:40:a4:22:02:96:01:e8:43:b3:6c:2a:c9:8e:
         5f:21:51:1b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHSyDeryACKkH7IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk
NjI3NDYzMjctYWI3ZS00NGE3LTlmZWUtOTc5MmY4ZWU5MGYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0OM9tMuLXguWTHkTF/yDUMbwWgjO7pAdcm7
NyOhKGU7exnwzwT2Ka4G9B2szkOkGesbiW6TDVOfR4p37/akojmRJZEC3AfMx6La
NiM5cRPb6pAhrfTSEBnYiSDUByZxUWpZMpN1dK7n8lVbI5cfiRHazKMFohvJ+Lzg
cTHYouiPdkW9mS8nvsdoEFzK4qHHPxrSO9qWeZAZju/WbPL9IvdOt2Y9/oEs8nQv
BhNqKLKuKIsC6jJVUnAQ9cmo7mDgXk+6E3DUnPrKiN9lE4p8NT6WF84X6cR22MXU
jRaNLYlBI5no9a0yhvPr5emAzTCkS3GD3XNOncJSq/MZsvuA8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI8eZi9WfbPDVFgUzu2moJF3ajo5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvOGQxMzlmZDgtY2I2NC0z
YjRkLTkwOWEtMzM1NjVjMzBlY2NjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHGGsAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMpZ/0sXF+kPOPCP19ilHovLbG6uqrH3a2N1S7iaf8lkCpsrZ4/wFwQg
2A+VUH5+uAkKDk8H/cYkymxvSeM5ilWMqWW8ep+K4oIqQnxFwx9khLevwzTfTPR+
55N+4HYf2mdl9v+l7bbEorqbnpSGKrY3du2lcj4RfjPTgMroMu6W62GpZVwG4asL
h5kbK3OeXuOaY/8umm7Vi7JwXMvFVLjxUujMlOKWmEzMHltwloEg0cDmVSAf1y/f
j0U6jOWHwPJI68mS0YEUPRx8DobH9szdPtBHJc2ofA4WOhdMDckqZKJWIQ3ec54d
CRpOicieQKQiApYB6EOzbCrJjl8hURs=
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:09:48 2025 by rpki-client